CVE-2017-2872

creationtimestamp| type| source ---|---|--- 2018-09-18 00:18:31+00:00| seen| https://t.me/cibsecurity/243...

CVE-2017-2872

The CVE refers to Foscam C1 Indoor HD Camera (Application Firmware 2.52.2.43) where CGIProxy.fcgi allows an unauthenticated upgrade flow to execute a crafted image. In the connected TALOS/TALOS-2017-0379 material, an administrator-authenticated HTTP request triggers fwUpgrade, storing upgrade.bin...

Foscam IP Video Camera CGIProxy.fcgi Firmware Upgrade Code Execution Vulnerability(CVE-2017-2872)

Summary Insufficient security checks exist in the recovery procedure used by the Foscam C1 Indoor HD Camera running application firmware 2.52.2.43. A HTTP request can allow for a user to perform a firmware upgrade using a crafted image. Before any firmware upgrades in this image are flashed to th...